Loco Translate Project Loco Translate
2 CVEs affecting Loco Translate Project Loco Translate. Latest disclosed: 2022-04-18. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24721 | Medium | 6.5 | 2021-11-08 | The Loco Translate WordPress plugin before 2.5.4 mishandles data inputs which get saved to a file, which can be renamed to an extension ending in .php, resulti… |
CVE-2022-0765 | Medium | 5.4 | 2022-04-18 | The Loco Translate WordPress plugin before 2.6.1 does not properly remove inline events from elements in the source translation strings before outputting them… |